$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3d479b6e-d7de-33d9-b5b4-757ee73cb84a.roa File: 3d479b6e-d7de-33d9-b5b4-757ee73cb84a.roa (raw, json) Hash identifier: 2jZ5PNTd7gvDL0s5luQNMfRM4Wob242dk8vKEnqzsuQ= Subject key identifier: ED:95:C0:FA:F4:65:AB:70:8D:B2:EA:5C:E8:7B:88:F4:09:DC:D3:99 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A20F54A4D3A3769F9D94BC800 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3d479b6e-d7de-33d9-b5b4-757ee73cb84a.roa Signing time: Mon 09 Jun 2025 01:00:50 +0000 ROA not before: Mon 09 Jun 2025 01:00:50 +0000 ROA not after: Sun 07 Sep 2025 01:00:50 +0000 asID: 7029 IP address blocks: 162.39.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:20:f5:4a:4d:3a:37:69:f9:d9:4b:c8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 9 01:00:50 2025 GMT Not After : Sep 7 01:00:50 2025 GMT Subject: CN=bb9f0236-1614-4d2b-a7e7-a6c8bdb8425c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:1f:7a:48:c8:91:81:b2:f2:68:3c:85:18:3c: df:ac:24:d1:4b:4c:40:8e:7c:b3:25:86:af:ba:91: a6:08:a7:11:4e:81:bd:06:e3:39:c3:9d:4e:5f:d9: e2:a4:f2:c0:9b:95:c0:43:87:fb:40:c6:7f:d3:a7: 0a:32:04:91:c9:2a:12:e9:f7:ea:f8:bb:5e:f7:49: 8c:c1:43:e4:4b:c2:9e:b5:06:3f:36:e6:5b:00:39: dc:5d:56:e2:f9:84:f3:d6:a7:3d:ac:d9:6b:ed:38: e5:a8:31:76:0d:b6:d7:eb:74:1c:fe:79:7d:1e:dd: 73:e4:c9:f4:10:1e:5f:19:b1:f1:0b:a0:72:58:04: 35:14:ef:10:76:6b:db:af:95:cb:bc:ca:d7:06:8a: 65:d0:dc:0a:03:df:c6:f5:c7:af:dc:df:59:4b:c1: 72:12:6b:ad:d4:50:5a:54:d0:bd:7d:49:ad:d1:6b: 6b:74:80:33:b6:eb:5e:ad:2e:36:6b:28:64:ed:2a: 4b:74:a7:5a:73:2d:1c:87:47:f6:76:d0:e1:cc:4b: ac:9d:f8:e5:02:83:86:c0:b1:6e:ef:61:86:3b:88: 09:81:67:75:73:5d:a2:48:e6:74:23:2b:93:a3:be: be:1e:d6:cf:b9:99:25:ae:9e:9f:84:1a:e3:ca:ed: 76:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:95:C0:FA:F4:65:AB:70:8D:B2:EA:5C:E8:7B:88:F4:09:DC:D3:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3d479b6e-d7de-33d9-b5b4-757ee73cb84a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 162.39.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:19:6d:95:d2:38:d8:9a:c6:4b:df:93:c1:af:14:1d:26:2a: ac:bd:c1:93:51:ed:ec:55:b0:fa:e1:6d:4c:76:2b:85:ad:04: 78:8d:cd:f2:c3:cc:96:b9:2b:14:dc:4c:ee:20:ee:e0:c9:1e: 8d:5e:d3:97:16:5f:46:44:ad:9c:e4:77:08:ef:92:89:b6:2d: f7:c4:a4:70:3f:70:0c:29:22:de:53:13:df:d1:9b:39:bf:cc: b8:c1:4b:3e:65:88:b9:8f:43:71:a5:16:79:ac:4a:ee:2f:79: 1c:06:18:54:a3:97:b1:33:ba:94:41:65:a0:dc:ef:35:02:2b: 15:ea:5d:52:1d:1f:d1:7b:59:aa:1b:b4:85:d2:b0:5b:9a:6d: 52:1c:be:35:ba:f2:b5:ab:27:30:0b:61:28:00:6d:72:90:67: 1e:de:5a:0f:a2:41:40:65:3a:45:7b:3e:2d:6c:b6:95:33:3e: 2f:83:54:84:ca:c4:2f:14:1c:bd:fd:8d:82:ee:76:27:9e:1e: 85:a4:f4:f1:49:17:74:b8:ee:14:e8:bd:47:89:78:ae:1a:7c: 37:01:c8:26:06:41:d3:43:76:f8:1a:ce:f5:9f:c8:52:c0:95: ea:b0:5f:0e:6c:96:58:c4:62:45:e7:86:67:fd:99:a8:6a:83: 54:0b:7e:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEog9UpNOjdp+dlLyAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDYwOTAxMDA1MFoXDTI1MDkwNzAxMDA1MFowLzEtMCsGA1UEAxMk YmI5ZjAyMzYtMTYxNC00ZDJiLWE3ZTctYTZjOGJkYjg0MjVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmx96SMiRgbLyaDyFGDzfrCTRS0xAjnyzJYav upGmCKcRToG9BuM5w51OX9nipPLAm5XAQ4f7QMZ/06cKMgSRySoS6ffq+Lte90mM wUPkS8KetQY/NuZbADncXVbi+YTz1qc9rNlr7TjlqDF2DbbX63Qc/nl9Ht1z5Mn0 EB5fGbHxC6ByWAQ1FO8Qdmvbr5XLvMrXBopl0NwKA9/G9cev3N9ZS8FyEmut1FBa VNC9fUmt0WtrdIAztuterS42ayhk7SpLdKdacy0ch0f2dtDhzEusnfjlAoOGwLFu 72GGO4gJgWd1c12iSOZ0IyuTo76+HtbPuZklrp6fhBrjyu12HwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO2VwPr0ZatwjbLqXOh7iPQJ3NOZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvM2Q0NzliNmUtZDdkZS0z M2Q5LWI1YjQtNzU3ZWU3M2NiODRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoifcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGsZbZXSONiaxkvfk8GvFB0mKqy9wZNR7exVsPrhbUx2K4WtBHiNzfLD zJa5KxTcTO4g7uDJHo1e05cWX0ZErZzkdwjvkom2LffEpHA/cAwpIt5TE9/Rmzm/ zLjBSz5liLmPQ3GlFnmsSu4veRwGGFSjl7EzupRBZaDc7zUCKxXqXVIdH9F7Waob tIXSsFuabVIcvjW68rWrJzALYSgAbXKQZx7eWg+iQUBlOkV7Pi1stpUzPi+DVITK xC8UHL39jYLudieeHoWk9PFJF3S47hTovUeJeK4afDcByCYGQdNDdvgazvWfyFLA leqwXw5slljEYkXnhmf9mahqg1QLfp0= -----END CERTIFICATE-----Generated at Sun Jun 15 13:00:30 2025 by rpki-client